Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FZ5Q6bhQnAmMvSaTkbXMH9PuzoI.roa
File: FZ5Q6bhQnAmMvSaTkbXMH9PuzoI.roa (raw, json)
Hash identifier: +gBlme4DPMpNyA+1kHoVsFltzRYyx0r0nyQcpEaAkYo=
Subject key identifier: 15:9E:50:E9:B8:50:9C:09:8C:BD:26:93:91:B5:CC:1F:D3:EE:CE:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181FCF3E11FDF935B8C56044D3C3F5C90F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FZ5Q6bhQnAmMvSaTkbXMH9PuzoI.roa
Signing time: Thu 14 Jul 2022 13:44:10 +0000
ROA not before: Thu 14 Jul 2022 13:44:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 193.222.99.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:f3:e1:1f:df:93:5b:8c:56:04:4d:3c:3f:5c:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 14 13:44:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=159e50e9b8509c098cbd269391b5cc1fd3eece82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:c9:e5:8b:4f:e1:36:a9:85:f5:10:e4:e1:
32:ae:0b:8e:8f:b8:a9:77:af:7e:de:9c:70:9c:a3:
3e:37:84:b2:42:e8:b1:9d:83:12:2d:2f:f2:40:75:
61:65:11:71:cd:c1:06:61:89:af:79:11:8c:9c:c5:
f7:27:f0:d3:9d:8e:8f:4a:7f:fa:8d:1d:e0:94:1b:
48:9d:58:4d:0a:6c:58:6c:5e:86:b5:e5:2d:cb:14:
7c:6d:ba:20:1c:e8:2c:23:b6:19:a6:91:ad:7c:58:
0d:27:47:11:71:f9:84:d2:a4:25:ba:17:74:e1:63:
5e:81:61:9c:61:b6:44:ac:dc:b3:b7:5f:c7:e5:ce:
23:cf:6e:67:25:f8:4a:64:07:9d:7a:c1:4b:c3:b6:
1d:72:be:f8:73:97:c0:15:02:cd:be:9b:5c:82:fc:
37:c6:b6:87:f9:14:09:8d:c6:7f:15:7a:8a:b2:1d:
4e:9e:26:b3:7b:43:c4:2f:63:11:ba:ee:0c:6f:17:
3c:63:2c:9b:4c:ba:0b:9d:e2:c1:80:6b:76:e8:25:
0c:e9:eb:08:17:47:18:30:1b:81:79:d6:2f:89:3e:
b8:bf:32:21:d1:70:85:62:76:81:87:d0:a7:82:9e:
70:e0:c4:99:ce:db:1c:4f:26:23:22:e2:7d:be:55:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:50:E9:B8:50:9C:09:8C:BD:26:93:91:B5:CC:1F:D3:EE:CE:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FZ5Q6bhQnAmMvSaTkbXMH9PuzoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.60.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dd:05:04:2a:17:4a:5c:00:c0:df:b1:09:31:4a:f4:84:2e:
07:ac:b0:98:57:62:d5:7c:d0:9e:d6:bb:32:81:ae:b6:85:fe:
e1:b4:d6:e8:bc:f3:0b:f2:5c:7c:ba:3c:42:2e:c0:c8:65:11:
69:d6:94:57:c8:13:18:08:db:86:18:d8:ba:1c:45:75:74:17:
ab:f4:b2:30:07:e2:28:8e:d6:db:39:e6:3b:d9:be:59:7d:6a:
c4:3e:97:28:b0:2b:dd:35:65:57:89:6f:0b:e9:1a:b4:06:a4:
e2:75:c0:7d:49:ee:0c:c8:92:10:2e:67:32:06:1f:b6:b7:54:
ad:02:98:a7:7e:3a:15:e1:b5:07:cb:c9:db:76:e6:26:69:9b:
ad:7f:69:6f:5a:21:e9:27:4a:99:3a:44:b3:11:d1:8f:91:d8:
96:53:a4:f9:75:0a:61:e6:a4:1f:bb:43:11:d0:d7:8d:14:36:
2c:1d:f9:01:b3:e7:2b:2e:31:fa:f7:58:4a:99:0b:41:d0:fb:
a3:61:f8:aa:38:04:50:e7:41:00:1b:75:f7:c8:e5:1c:55:65:
bc:c1:6d:6f:0d:5e:09:93:3a:1c:36:81:a5:f5:d5:aa:62:cd:
f3:af:e8:f5:80:c5:87:56:a7:10:bc:89:b1:e5:cb:e1:5e:e4:
1c:10:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org